Source: curl
Version: 7.88.1-10
Severity: normal
X-Debbugs-Cc: d...@fifthhorseman.net
libcurl4 (and indeed, libcurl3-nss) both ship shared objects that
themselves link to a set of shared objects that are a strict superset
of the shared objects linked to by libcurl3-gnutls:
```
0 dkg@alice:~$ libs() { ldd "$1" | sort | sed s/0x.*// ; }
0 dkg@alice:~$ diff -u <(libs /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4.8.0
) <(libs /usr/lib/x86_64-linux-gnu/libcurl-nss.so.4.8.0)
--- /dev/fd/63 2023-07-22 17:17:42.627000390 -0700
+++ /dev/fd/62 2023-07-22 17:17:42.627000390 -0700
@@ -18,12 +18,18 @@
libldap-2.5.so.0 => /lib/x86_64-linux-gnu/libldap-2.5.so.0 (
libnettle.so.8 => /lib/x86_64-linux-gnu/libnettle.so.8 (
libnghttp2.so.14 => /lib/x86_64-linux-gnu/libnghttp2.so.14 (
+ libnspr4.so => /lib/x86_64-linux-gnu/libnspr4.so (
+ libnss3.so => /lib/x86_64-linux-gnu/libnss3.so (
+ libnssutil3.so => /lib/x86_64-linux-gnu/libnssutil3.so (
libp11-kit.so.0 => /lib/x86_64-linux-gnu/libp11-kit.so.0 (
+ libplc4.so => /lib/x86_64-linux-gnu/libplc4.so (
+ libplds4.so => /lib/x86_64-linux-gnu/libplds4.so (
libpsl.so.5 => /lib/x86_64-linux-gnu/libpsl.so.5 (
libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (
librtmp.so.1 => /lib/x86_64-linux-gnu/librtmp.so.1 (
libsasl2.so.2 => /lib/x86_64-linux-gnu/libsasl2.so.2 (
libssh2.so.1 => /lib/x86_64-linux-gnu/libssh2.so.1 (
+ libssl3.so => /lib/x86_64-linux-gnu/libssl3.so (
libtasn1.so.6 => /lib/x86_64-linux-gnu/libtasn1.so.6 (
libunistring.so.2 => /lib/x86_64-linux-gnu/libunistring.so.2 (
libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (
1 dkg@alice:~$ diff -u <(libs /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4.8.0
) <(libs /usr/lib/x86_64-linux-gnu/libcurl.so.4.8.0)
--- /dev/fd/63 2023-07-22 17:17:48.623045082 -0700
+++ /dev/fd/62 2023-07-22 17:17:48.623045082 -0700
@@ -24,6 +24,7 @@
librtmp.so.1 => /lib/x86_64-linux-gnu/librtmp.so.1 (
libsasl2.so.2 => /lib/x86_64-linux-gnu/libsasl2.so.2 (
libssh2.so.1 => /lib/x86_64-linux-gnu/libssh2.so.1 (
+ libssl.so.3 => /lib/x86_64-linux-gnu/libssl.so.3 (
libtasn1.so.6 => /lib/x86_64-linux-gnu/libtasn1.so.6 (
libunistring.so.2 => /lib/x86_64-linux-gnu/libunistring.so.2 (
libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (
1 dkg@alice:~$
```
What advantage is there for the library to link to these extra
libraries? libcurl-gnutls seems like the minimal implementation here.
--dkg
-- System Information:
Debian Release: trixie/sid
APT prefers testing-debug
APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'oldstable'),
(200, 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.3.0-1-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
-- no debconf information
